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rn ' 

Abstract. Using only linear algebra over Zp, we define a discrete probability distribution 
^^ ' on the set of isomorphism classes of short exact sequences of Zp-modules, and then conjecture 

Cn . that as E varies over elliptic curves over a fixed global field k, the distribution of 

^! ^ E{k) (g) Qp/Zp -> Selpco E^Ul[p°°]^0 

■^r . is that one. This single conjecture would explain many of the known theorems and con- 

jectures on ranks, Selmer groups, and Shafarevich-Tate groups of elliptic curves. We also 
prove new theorems on the arithmetic of elliptic curves that partially justify our conjecture. 



in 






1. Introduction 



1.1. Selmer and Shafarevich— Tate groups. Fix a global field k. Let Q be the set of 
nontrivial places of k. Let ^ be the set of elliptic curves over k, or more precisely, a set 
containing one representative of each isomorphism class. Given E & S and a positive integer 
n, the 77,-Selmer group Sel^-E is a finite group that is used to bound the rank of the finitely 
generated abelian group E{k). If n is a product of prime powers p^, then Sel„ E is the direct 
sum of the Selpe, so we focus on the latter groups. If p is prime, one may also form the 

Cr . direct limit Selpoo E := lim Selpe E. This group, together with the p-primary subgroup of the 

cn . Shafarevich-Tate group III = in(£') := ker (}i^{k,E) — )■ Yl^^^^E^{k^,E)), fits into an exact 

tJ- ! sequence 

m : — > E{k) ® ^ — > Selpoo E — > m[p°°] — > (Seq^) 

of Zp- modules with finitely generated Pontryagin duals (i.e., each Zp-module in the sequence 
|J> ' Seqg is isomorphic to (Qp/Zp)"* © F for some s G Z>o and finite abelian p-group F). Since 

?H ■ Eik) ® ^ is divisible, the sequence splits. 

1.2. Intersection of random maximal isotropic Zp-modules. Our goal is to predict 
the distribution of Seq^; as E varies over S". More precisely, using only linear algebra over Zp 
we will define a discrete probability distribution ^ on the set of isomorphism classes of short 
exact sequences of Zp-modules and then conjecture that for each sequence ^, the density of 
{E G S : Seq^ ~ y} equals the ^-probability of (the isomorphism class of) 5^ . (To define 
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density of a subset of S precisely, one orders S by height as explained in the introductions 
to |BS10| and |PR12| . The reason for ordering by height is that most other orderings lead 



to statements that are difficult to corroborate: for instance, the asymptotic behavior of the 
number of elliptic curves over Q of conductor up to X is unknown, even when no condition 
on its Selmer sequence is imposed.) 

We now describe the distribution ^. Equip V := Z^" with the standard hyperbolic 
quadratic form Q: V — ;■ Zp given by 

n 

Q{xx, . . . , a;„, yi, . . . , ?/„) := ^ Xiyi. (1) 

Let OGrv'(Zp) be the set of rank n Zp-submodules Z <V that are direct summands such 
that Q\z = (see Section H]). There is a natural probability measure on OGry(Zp), defined 
so that for each e > 0, the distribution of Zj]fZ in V j^fV is uniform among all possibilities 
(see Section [2]). Fix W" := ZJJ x G OGry(Zp), and choose a second Z G OGry(Zp) at 
random. (For what follows, it would be equivalent to choose both W and Z at random, since 
the orthogonal group of {V^Q) acts transitively on OGry(Zp): see Proposition 14.21 ) View 
Z ®^ and ly ® ^ as Zp-submodules of \^ ® ^, where the tensor products are over Zp. 
Define 

R:={ZV\W)®^ "/National points", or "i?ank" 

Zp 

S:={z® ^ J V\\W ® y^ J "Selmer group" 

T := SjR "Shafarevich- Tate group" 

(The labels on the right hint at what these groups will be modeling. For instance, the 
Zp-module Z fl H^ is intended to model -E'(/c) ® Zp.) Let ^2n be the distribution of the 
isomorphism class of the exact sequence 

so constructed (here ^ is for "quadratic"). We will prove that ^2n converges as n — )■ cxd (see 
Proposition 15. 7p . Define ^ as the limit. 

Conjecture 1.1. Fix a global field k. For each short exact sequence 5^ of Zp-modules, the 
density of {E G S : Seq^ ~ ^5^} equals the ^-probability of 5^ . 

We will prove that Conjecture ILII has the following consequences: 

• 50% of elliptic curves over k have rank 0, 50% have rank 1, and 0% have rank 2 or 
more; cf. |Gol79l Conjecture B] and |KS99allKS99b] . 

• L[I[p°°] is finite for 100% of elliptic curves over k. 

• Conjecture Ll(a) of |PR12] concerning the distribution of Selpi? holds. In fact, our 
Conjecture lLll implies a generalization concerning the distribution of Selpe E for every 
e > (see Section [5.5p . These consequences are consistent with the partial results 
that have been proved: see the introduction of |PR12) for discussion. 

2 



• C. Delaunay's conjecture in |Del01t[Del07tlDJ13a| a la Cohen-Lenstra regarding the 
distribution of III[p°°] for rank r elliptic curves over Q holds for r = and r = l|j 

For r > 2, Conjecture 11.11 cannot say anything about the distribution of III[p°°] as E 
varies over the set S'r '■= {E G ff : ik E{k) = r}, because the locus of Z G OGry(Zp) where 
rk(Z n W) = r is of measure (Proposition 15. 6p . On the other hand, that locus carries 
another natural probability measure, and if we sample Z with respect to this new measure, 
the distribution £^2n,r of T tends to a limit .5^. as n — ;■ oo (see Section [5l4|) . 

Conjecture 1.2. Fix a global field k and r G Z>o such that S'r is infinite. For each finite 
abelian p-group G, the density of {E G ^r '■ in[p°°] — G} in S'r equals the ^-probability of 
G. 

We will prove that Conjecture 11.21 (over Q) implies Delaunay's conjecture for rank r elliptic 
curves. 

Remark 1.3. In fact, Delaunay made predictions for the whole group III and not only III[p°°] 
for one p at a time. For further discussion of this, see Section 15.61 

Remark 1.4. In fact, one can turn things around, and use Delaunay's conjecture for III[p°°] 
together with the conjecture that the rank r is or 1 with 50% probability each to obtain 
conjectural distributions for Selpoa E and Sel^e E (cf. |DJ13a[ §6.2] and |DJ13b[ §5]). Specif- 
ically, Selpoo E ~ (Qp/ZpY © UI[p°°]; if moreover E{k)tovs = 0, as holds for 100% of elliptic 
curves (Lemma 15. Sp . then Selpoc E determines Selpe E (Proposition 15. lOT lcj) ) . 

Remark 1.5. Certain restricted families of elliptic curves can exhibit very different Selmer 
group behavior. Even the average size of Sel2 E can be infinite in certain families. See |Yu05| . 
|XZ09| . |XZ08] . and |FX12j for work in this direction. 



1.3. Cokernel of a random alternating matrix. Moreover, Conjecture 11.21 implies that 
another natural distribution on finite abelian p-groups yields a model for III[p°°]. We now 
describe it. For an even integer n, choose an alternating n x n matrix A G Mn{1jp) (see 
Section 13.31 for definitions) at random with respect to Haar measure, and let .c^^o be the 
distribution of coker A. 

More generally, for any fixed r > 0, for n with n — r & 2Z>o, choose A at random from 
the set of alternating matrices in M„(Zp) such that ik A = n — r (with respect to a measure 
to be described), and let £^n,r be the distribution of (coker A) tors- 

Theorem 1.6. For each r > 0, 

(a) the distributions s^n,r converge to a limit s^j. as n -^ oo through integers with n—r G 2Z>o, 
and 

(b) the distributions s^r and ,% coincide. 

1.4. Cassels— Tate pairing. The Cassels-Tate pairing on III is an alternating bilinear pair- 
ing 

m X m ^ o/z 



For this conjecture, see [DelOll Heuristic Assumption], with the modification that u/2 is replaced by u, 
as suggested by the u ~ \ case discussed in [Del07[ §3.2] (his u is our r); see also JPR121 Section 6] and 
|DJ13a[ Section 6.2]. Strictly speaking, in order to have our model match Delaunay's conjecture, we modify 
his conjecture to order elliptic curves over Q by height instead of conductor. 
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whose kernel on each side is the maximal divisible subgroup of III. Taking p-primary parts 
yields an alternating bilinear pairing 

If III[p°°] is finite, then this pairing is nondegenerate. 

Recall that we are modeling III[p°°] by the random groups T and (coker A)tors constructed 
in Sections 11.21 and II. 3[ respectively. As evidence that these models are reasonable, we will 
construct a canonical nondegenerate alternating pairing on each of T and (coker A)tors- 



1.5. Arithmetic justification? The heuristic in |PR12| that Se\pE behaves like the inter- 
section of maximal isotropic subspaces in a high-dimensional quadratic space over ¥p was 
given an arithmetic justification, namely, that SelpE is isomorphic to the intersection of two 
maximal isotropic subspaces in an infinite-dimensional locally compact quadratic space over 

Fp. 

Question 1.7. Is there an arithmetic justification for the linear algebra processes that 
produce ^, .5^, and j2^? 

For instance, given an elliptic curve E, is UI{E) isomorphic to (coker A) tors for some 
alternating matrix A over Z that can be constructed from the arithmetic of E7 

Also, can one explain why the maximal isotropic submodules used to define ^ are required 
to be direct summandsl Some partial answers and open questions related to this will be 
discussed in Section [HI 

2. The canonical measure on the set of Zp-POINTS OF A SCHEME 
The following is a consequence of work of J. Oesterle and J.-P. Serre. 

Proposition 2.1. Let X he a finite-type Zp-scheme. Let d = dimX^^. Equip X{7jp) with 
the p-adic topology. 

(a) There exists a unique bounded M.>o-valued measure fi = fix on the Borel a-algebra of 
X['Lp) such that for any open and closed subset S of X{7jp), we have 

# (image of S in X{Z/p^Z)) 



lJi{S) = lim 



e— )-oo 



{p- 



(b) If Y is a subscheme of X and dimlQ^ < d, then /i(y(Zp)) = 0. 

(c) // S is an open subset of X{'Lp), and Xq^ is smooth of dimension d at sq^ for some 
s ^ S, then fi{S) > 0. 

Proof. 

(a) If X is afiine, this is a consequence of the discussion surrounding Theoreme 2 of |Qes82| . 
which builds on |Ser8H S3], and the Hahn-Kolmogorov extension theorem. In general, 
let (Xj) be a finite afiine open cover of X. Each set Xj(Zp) is open and closed in 
X(Zp), because Xj(Zp) equals the inverse image of Xj(Fp) under the reduction map 
X(Zp) — !■ X(Fp). Since Zp is a local ring, the sets Xj(Zp) form a cover of X(Zp). The 
measures on Xj(Zp) and Xj(Zp) are compatible on the intersection, by uniqueness, so 
they glue to give the required measure on X(Zp). 
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(b) We may assume that X is afRne and that y is a closed subscheme of X. Even though 
y(Zp) might not be open in X(Zp), it is an analytic closed subset (see |Oes82t §2]), so 

;.(F(Zp)) = Jim ^^^^^ 

still holds. According to |Ser81l p. 145, Theoreme 8], #Y{Z/p^Z) = 0{{p^y-^) as 
e — )■ cxD, so the limit is 0. 

(c) See the discussion before Theoreme 2 of |Oes82| . D 



Corollary 2.2. If X is as in Proposition \2.1[ and Xq^ is smooth of dimension d at xq^ for 
some X G X(Zp), then fi can be normalized to yield a probability measure v on X(Zp). 

From now on, when we speak of choosing an element of X(Zp) uniformly at random for 
X as in Corollary I2.2[ we mean choosing it according to the measure v. 

3. Modeling Shafarevich-Tate groups using alternating matrices 

3.1. Notation. Let i? be a principal ideal domain. (We could work with more general rings, 
but we have no need to.) Let K = Fraci?. Given an /2-module L, let L^ := B.oin^{L, R), let 
Lk '■= L ®R K, and let Ltors '■= {x & L : rx = for some nonzero r G R} = ker(L — )■ L^)- 
If a free i?-module L has been fixed, and A^ is a submodule of L, define the saturation 

jysat ._ jY^ n L = {x G L : rx G A^ for some nonzero r G R}. 

Given a homomorphism A : L — )■ M, let A* : M'^ — )■ L^ denote the dual homomorphism; this 
notation is compatible with the notation A^ for the transpose of a matrix. Let M„(i?)ait be 
the set of alternating n x n matrices, i.e., matrices A with zeros on the diagonal satisfying 
A' = -A. For S C Mn{R), define ^^it = ^ n M„(i?)ait. 

3.2. Symplectic abelian groups. Define a symplectic abelian group (called group of type S 
in |Del01) ) to be a finite abelian group G equipped with a nondegenerate alternating pairing 
[ , ] : G X G — i> Q/Z. An isomorphism between two symplectic abelian groups is a group 
isomorphism that respects the pairings. Let Sp(G) be the group of automorphisms of G 
respecting [ , ]. One can show that two symplectic abelian groups are isomorphic if and 
only if their underlying abelian groups are isomorphic. If p is a prime, define a symplectic 
p-group to be a symplectic abelian group whose order is a power of p; in this case, [ , ] may 
be viewed as taking values in Qp/Zp. 

3.3. Pairings on the cokernel of an alternating matrix. Let L be a free _R-module 
of rank n. Let A: L x L ^ R he a.n alternating i?-bilinear pairing; alternating means that 
A{x,x) = for all x E L. Let A: L ^ L^ be the induced i?-homomorphism. If we choose 
a basis for L and use the dual basis for L"^, then A corresponds to a matrix A G M„(i?) ait; 
then A is identified with 

R"" xR"" ^R 

X, y I— )■ x^Ay. 

A change of basis of L is given by a matrix M G GL„(i?), which changes A to M^AM; this 
defines an action of GL„(i?) on M„(i?)ait. 
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Let L"*- := {x G L^ '■ ^{L, x) C R}. Then Ak '■= A^ K induces an alternating pairing 

L^ L^ K 

3.4. The pairing in the nonsingular case. Suppose that A is nonsingular in the sense 
that Ax'- Lk — )■ {L^)k is an isomorphism (i.e., detA ^ 0). Then L^ = A~^L^ and 
multiphcation-by-A induces an isomorphism L^/L ^ L'^/AL = coker A of finite torsion 
i?-modules. Substituting (and fiipping a sign) rewrites ([2]) as an alternating pairing 

K 

{ , )a- cokerA x cokerA -> — (3) 

rt 

induced by 

[,]^:i?"xi?"^| (4) 

x,y \-^ x^A^^y, 

where each R^ is L'^ . The right kernel of [ , ]a is the image im(74: R^ — )■ /?") since one 
has x^{A~^y) G R for all x G R^ if and only if A~^y G R"". Since the pairing is alternating, 
the left kernel is the same. Thus the left and right kernels of ( , )a are 0; i.e., ( , )a is 
nondegenerate. 

3.5. The pairing in the singular case. Suppose that det A = 0. Let Lq = kerA. The 
quotient L/Lq is torsion-free, and hence free, since i? is a principal ideal domain. Then 
A induces a nonsingular alternating pairing Ai on L/Lq, corresponding to some Ai. The 
submodule (L/Lq)'^ of L^ is the saturation of imA in L'^ , i.e., {imAY^^ = (imA)x H L'^. 
Then coker(74i : L/Lq — )■ (L/Lq)^) identifies with (im74)'^^*/(imy4) ^ (coker 74)tors- Applying 
Section [33] to Ai, we obtain an alternating /2-bilinear pairing 

K 

{ , )a- (coker yl)tors x (coker yl)tors -^ 



R 



whose left and right kernels are 0. 



3.6. Lemmas. Take R = Zp. Given A G M„(Zp), let A := A mod p G M„(Fp). If A G 
M„(Zp)ait and detA ^ 0, then by Section [3l4l cokerA with ( , )^ is a symplectic p-group. 

Lemma 3.1. Suppose that A,D ^ Mn{7jp)g^t, and det D ^ 0. We have [ , ]a = [ ■, ]d if o-nd 
only z/det A ^ and A~^ - D~^ G M„(Zp). 

Proof. This is immediate from (jl]). D 

Lemma 3.2. Suppose that D G MnC^p) and det D ^ 0. Then 

{A G M„(Zp) : det A ^ and A^^-D'^ G M„(Zp)} = {A e D + DMn{Zp)D : ikA = ikD}. 

Proof. Suppose that A G M„(Zp) is such that det A ^ and A~^ — D^^ = N for some A^ G 
M„(Zp). Multiplying by A on the left yields / - AD~^ = AN, so AD^^ G M„(Zp); similarly 
DA~^ G M„(Zp), so AD^^ G GL„,(Zp), and in particular ikD = ikA. Multiplying instead 
by D on the left and A on the right yields D-A = DNA = D{N ■ AD-^)D G DMn{Zp)D, 
so Ae D + DMn{'Lp)D. 

Conversely, suppose that A = D + DND with A^ G M„(Zp), and ikA = ikD. Then 

A = D + DND, so kei D C kerA, and the rank condition implies kei D = kerA. If 
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V G ker^I + ND), then v e keiA = keiD; so both I + ND and ND kill w, so w = 0. Thus 
I + ND e GL„,(Fp), so I + ND e GL„(Zp). Now D~^A = I + ND, so its inverse A-^D is 
in GL„(Zp) too. Multiplying A = D + DND by A~^ on the left and D~^ on the right yields 
D-i = A-i + A-^DN, so A"i - D~^ = -{A-^D)N e M„(Zp). D 

Corollary 3.3. Let n he even, let ei, . . . , e„/2 G Z,>o, and /et 

D-/^ diag(p^S...,/"/2)\ 

Lei m = 2^{z G {1, . • . ,'^/2} : Cj = 0}. If A E M„(Zp)ait ^s chosen at random with respect 
to Haar measure, then 

Prob (det A ^ and A'^ - D'^ G M„(Zp)) = ^^^'".if'^^^'N detD^-^ 

Proof. Let e„/2+i = Cj for z = l,...,n/2. For A G M„(Zp)ait, the condition A E D + 
DMn{'^p)D is equivalent to aij = dij (mod p'^'p'^JTjp) for all i < j, so 

n 

Prob (A G £> + DMniZp)D) = Y[p~^'p-^' = Y[{p~^T~^ = \ det D\';~\ 

Let B G Mm(Zp)ait be the minor formed by the entries a^j such that e, = e^ = 0. The 
condition rkA = rkD is equivalent to B E GLm(Fp), which is independent of the congruences 
above and which holds with probability ^ GLm(Fp)ait/#Mm(Fp)ait- Multiplying yields the 
result, by Lemma [3.21 D 

Combining Corollary 13.31 with Lemma 13.11 yields 

Corollary 3.4. Retain the notation of Corollary \3.3[ Then 

Prob {[,U = [,]d) = *^^"'!l'^'''' \ detDll 



#GL^(Fp)alt 11-^1 n-l 
#M^(Fp)alt ' '^ 



Corollary 3.5. Fix any alternating pairing [ , ] : Z" x Z" — )■ Q/Z inducing a nondegenerate 
pairing on a finite quotient G ofUl. Let m = n — dimpp G\p]. If A E M„(Zp)ait is chosen at 
random, then 

Proof. The structure theorem for symplectic modules over principal ideal domains implies 
that there exists a change-of-basis matrix M E GL„(Zp) and a matrix D as in Corollary 13.31 
such that [ , ] = [ , ]MtDM- The change of basis reduces the statement to Corollary 13.41 D 

The fraction on the right side of (^ can be evaluated: 

Lemma 3.6. For m E 2Z>o, 

# GL^(Fp)alt ^ yr, _ l-2^^ 
#M„(Fp)alt \}^ ^ ^' 
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Proof. There are p™~^ — 1 possibilities for the first column of a matrix in GLm{^p)ait, and the 
number of choices for the rest of the matrix is independent of this first choice, as one sees by 
performing a change of basis of F" fixing (1,0,..., 0)*. If the first column is (0, 1, 0, 0, ... , 0)*, 
there are p™-"^ possibilities for the second column (it has the shape (1, 0, *, ■ ■ ■ , *)), and then 
the lower (m — 2) x (m. — 2) block is an arbitrary element of GLm_2(IFp)ait- Thus 

#GL„(Fp),it = (p"^"' - l)|>™^'#GL„_2(Fp)ait. 

Induction on m yields ^ GLm(Fp)ait, and we divide by #Mm(Fp)ait = p^^K D 

The following will be used in Section 15.41 

Lemma 3.7. The probability that a random A G M„(Fp)ait satisfies dimkerA > n/2 tends 
to as n —7- oo. 

Proof. Let k = \n/2]. The number of A G M„(Fp)ait with dimkerA > n/2 is at most the 
number of pairs {A, K) with A G M„(Fp)ait and K a /c-dimensional subspace of ker A. The 
number of i^'s is 0{p''^"'~''^). For each K, the A's vanishing on K correspond to alternating 
maps from the (n — /c)-dimensional space ¥p/K to its dual, of which there arep*-""*^^^"'"'^"^-*'^. 
Thus the total number of A with dim ker A > n/2 is at most 

Q/^k(n~k)\ _^(n-k)(n-k-l)/2 ^ Q/^(n~k){n+k~l)/2Y 

Dividing by #M„(Fp)ait = p"("~i)/2 yields 0(p~''(''~^)/^), which tends to as n -;> oo. D 

Remark 3.8. In fact. Lemma 1X71 remains true if n/2 is replaced by any function of n tending 
to oo, but the n/2 version suffices for our application. 

3.7. The distribution in the nonsingular case. The following theorem states that the 
limit £/q in Theorem I L6([a] ) exists and gives an explicit formula for its value: 

Theorem 3.9. For each symplectic p- group G, if A is chosen at random in M„(Zp)ait with 
respect to Haar measure for even n, then 

lim Prob (coker A - G) = —$^ TT(1 - p'"'')- 

^^~ ^ ' #sp(G')-y-^ ^ 



n— >oo 
n even 



Moreover, the sum of the right side over all such G equals 1. 
Proof. Define 

7r„(G') := Prob (coker A ^ G) , and it(G) := hm 7r„(G). 



n— >oo 
n even 



Let m = n — diniYp G[p] G 2Z>o. Given a surjection / : Z" — )■ G, we may pull back the pairing 
on G to obtain an alternating pairing on Z^. This defines a surjection from Surj(Zp, G) to the 
set of alternating pairings [ , ] : Z^ x Z^ ^^ Q/Z such that the induced S'-group is isomorphic 
to G. Each fiber is the orbit of a free action of Sp(G) on Surj(Zp, G) (by post-composition), 
so the number of such [ , ]'s is # Surj(Zp, G)/7^ Sp(G'). By Corollary 13. 5[ the probability 
that [ , ]a equals any fixed one of these [ , ] equals 

# GLm(Fp)alt fn^^l-n 



#M^(Fp)alt 



OfGY 



Multiplying yields 

As n — )■ oo, we have m — )■ oo through even integers, and 7^ Surj(Z"', G)/(7^G)"' — )■ 1 since 
almost all honiomorphisms Z^ — )■ G are surjective, so by Lemma [3. 6[ we obtain 

#„ 00 
^ TTn _.i-2M 
#Sp(G) 



^(^)=^Q;7?7Tn(i-p^ 



It remains to prove that J2g'^(^) ~ -'-• -^°^ fixed n, the event that cokerA is infinite 
corresponds to the Zp-points of a hypersurface in the affine space of alternating matrices, so 
Proposition 12. Itf bj) shows that it has probability 0; thus X]g^'"(^) ~ -'-• -^^ Fatou's lemma, 
^(^7r(G) < 1. In particular. 



00 



In (ED, we have #Surj(Z^,G) < #G" and #GL„(Fp),it < #M^(Fp),it, so 7r„(G) < 
i^G/^Sp{G); this lets us apply the dominated convergence theorem to deduce 

^7r(G) = ^lim7r„(G) =lim^7r„,(G) = l. D 

G G G 

3.8. The distribution in the singular case. Fix n > 0. The variety A"^""^)/^ parametriz- 
ing alternating n x n matrices over any field can be stratified according to the rank of the 
matrix. Namely, given an integer r with < r < n and n — r even, let Vn,r be the locally 
closed subvariety parametrizing alternating n x n matrices of rank n — r. (The hypotheses 
on r are needed to ensure that Vn,r is nonempty.) The existence of symplectic bases shows 
that Vn^r is a homogeneous space for the action of GL„ on A"'*^"'"^^/^. 

Lemma 3.10. dimK,r = (2) - (2) =• ^■ 

Proof. Sending a matrix A G Mn{k) to im(A) defines a morphism from Vn,r to the Grass- 
mannian of (n — r)-planes 11 in n-space. The fiber above 11 parametrizes nondegenerate 
alternating maps from k"- / {im A)-^ ~ iiai{A)^ to im(74), so each fiber has dimension ("gO' 
Thus dimK,. = r{n - r) + ("7) = ('^) - Q. 

Alternatively, one could compute the dimension of the stabilizer of 

/(n-r)/2 \ 

by writing an equation in 2 x 2 block matrices with blocks of size n — r and r. D 

We have the locally closed stratification 

r 

where r ranges over integers with < r < n and n — r even. The Zariski closure Vn,r of 
Vn^r in A"'^"~^)/2 is the locus [Jj,>j, Ki,s of alternating matrices of rank at most n — r: this is 
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closed since it is cut out by the vanishing of the (n — r + 1) x (n — r + 1) minors, and it is in 
the closure of Vn,r, as one can see from using standard symplectic matrices. We may extend 
Vn,r to a closed subscheme of A^ defined by the same equations. 

Let An,r = ^n,r(Qp) H ^n(^p)ait; SO wc havc an aualogous locally closed stratification of 
topological spaces 

r 
The closure An,T of •^n,r equals Vn,r{'^p) = [Js>r'^n,s- 

Fix r. Proposition 12. II and Corollary 12.21 applied to X = Vn,r yields measures /i and u on 
An,r- By Proposition 12JjJb]), fi{An,s) = for s > r, so the probability measure u restricts 
to a probability measure z/ on the open subset An,r- We use /i to denote the fi for different 
varieties; the meaning will be clear from context. 

The following generalization of Theorem 13.91 states that the limit i2^ in Theorem ll.6([a] ) 
exists for each r G Z>o and gives an explicit formula for its value: 

Theorem 3.11. Fix r G Z>o, and fix a symplectic p-group G. If A & An,r is chosen at 
random with respect to u, then 



Jim Prob((coker A),„,. ^ G) = f-l— J] (1 -P^"") 

n—r even ^ '^^ ' i=r+l 



Moreover, the sum of the right side over all such G equals 1 . 

To prove Theorem 13.111 we need the following two lemmas. Let | det |'^ : M„,(Zp) — )■ M be 
the function A \-^ \ detAj^. 

r !1^ l-pi-2* 
Lemma 3.12. For any s G M>o, we have / I det I* w = TT ^ „. „ . 

Proof. The proof is an easy induction on n: see [IguOO p. 164]. D 

Lemma 3.13. Define 

/3: GL„(Zp) X An-rfi ^ ^n,r 

Then /3^,(yU x | det |^/i) = cfi for some c > depending on n and r. 

Proof. Given B G M^ilj/p'^'L) in the reduction of ^„ ,,, we must count the number of (M, A) G 

GL„(Z/p^Z) X M„_r(Z/p'^Z)ait such that M* I „ „\ M = B. We may assume that e is large 

enough that some (n — r) x (n — r) minor of B has nonzero determinant mod p'^. We may 

G 0' 
0. 

'* 0' 



'G 0^ 
assume also that B itself is of the form I „ „ ) ; then the set of (M, A) is 



{N-\N^BN) : A^ G GL^{Z / p^Z), N^BN has the form 



^0 
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If A^ = I „ q] ^ then the condition on N is equivalent to P G GL„_r(^/j'^^), P^CQ = 0, 

Q^CP = 0, and Q*CQ = (invertibihty of P follows from comparing determinants of 
minors of B to those of N^BN). Since C* = —C, these conditions are equivalent to P € 
GLn^ri'^/p'^'^) and CQ = 0. The number of possibilities for P is # GL„_r(^/p^^), which is 
independent of B. On the other hand, if we view C as a map from the finite group (Z/p'^Z)""'^' 
to itself, its kernel has the same size as its cokernel, which is | detC|~^, so the number of 
possibilities for Q is | det C\~^. Thus if each pair (M, A) is weighted by | det A\p = \ det C\p, 
then the weighted count of such pairs is independent of B. D 

Proof of Theorem \3.11\ Define 

An,r{G) := {A e An,r ■ (cokcr A)tors ^ G} . 

As n — 7- oo through integers with n — r even. 



l^iAnAG)) 



J An AG) ^ 
JAn.r ^ 

#'^ Wyl„-,,o(G) /^ 

r, I det I'^/i 



(by Leiiiiiia r3.13p 



-^71 — r.O 

#G_T 

nr ^=^ 



-> #Sp(G) ii^-i^v^^ J_ ^^^ Theorem ^M and Lemma [3l2]) 



^^1_, oo 



#Sp(G) 



n(i-p 



l~2i\ 



i=r+l 

The same argument as in the proof of Theorem 13.91 shows that these numbers sum to 1. D 

The remainder of this section proves corollaries to be used in Section 15.61 By XI g ^^ 
mean a sum over (isomorphism classes of) symplectic abelian groups. Similarly, ^4tG<n *^^ 
'Yl,4tG=n indicates a sum over the subset of such G satisfying the condition. Define 

'"''■ #Sp(G)- 
The sum in Theorem 13. 1 II being 1 implies that 



oo 
fc=0 #G=p'^^ 



WGt' = Y[{i-v'~^'tr\ 



holds for t = p~^^, so it holds identically in Q[[t]]. Apply the g-binomial theorem to the right 
side (take x = p~'^ and z = pt m the expression Z in |Eul48[ §313]) and equate coefficients 
of t^ to obtain 

k 

11 



which is equivalent to [DelOlt Corollary 6]. Taking the product over the prime powers in the 
factorization of a positive integer n, and using 

oo 

H (1 - m-2)-i < n (1 - "^"')"' = 2 

prime powers m > 1 dividing n m=2 

yields the following. 

Corollary 3.14. For any n > 1, we have 1/n < ^M,G=n'^ "^g ^ 2/n. 

Corollary 3.15. We have Y.#G<n'^G > |logn and Y.#G&[e,n]'^G = C'(log(n/£)). 

4. Orthogonal Grassmannians 

4.1. Grassmannians. Given < ?7i < n, for each commutative ring A let Grm„(A) be the 
set of direct summands W of A"' that are locally free of rank m. As is well known, this 
functor is represented by a smooth projective scheme Gr^^^ of relative dimension m{n — m) 
over Z, called a Grassmannian. 

4.2. Maximal isotropic direct summands. Now equip A^" with the hyperbolic quadratic 
form Q : A?"^ — )■ A given by 

n 

Q{xx, . . . , a;„, yi, . . . , y„) := ^ Xiyi. 

The associated bilinear pairing is (a, 6) := Q{a + 6) — Qia) — Q{b). A direct summand Z is 
called isotropic if Q\z = (in general this is stronger than requiring that ( , )\zxz = 0). Let 
OGiniA) be the set of isotropic Z G Gr„_2n(^)- Such Z will also be called maximal isotropic 
direct summands of A^". Let W be the maximal isotropic direct summand Z" x of Z^". 

Lemma 4.1. Let A be a ring. Let X,X' e OGr„(74) be such that X © X' — )■ A^" is an 
isomorphism. 

(a) The restriction of { , ) to X x X' identifies X' with X'^ . 

(b) Let 0: X — 7- X' be an A-module homomorphism. Then graph(0) G OGr„(A) if and only 
if (p is alternating (with respect to the identification above). 

Proof. 

(a) By tensoring with A/m for every maximal ideal m C A, we reduce to the case in which 
y4 is a field. The kernel of X' — )■ X^ is orthogonal to X, but also to X' since X' is 
isotropic. By nondegeneracy of ( , ) on A^^., this kernel is 0. Since X' and X^ are vector 
spaces of the same dimension, X' — )■ X^ is an isomorphism. 

(b) For a; G X, 

(x, (t){x)) = Q{x + (j){x)) - Q{x) - Q{(t){x)) = Q{x + (j){x)). 

By definition, </> is alternating if and only if the left side is for all x. Also by definition, 
graph(</)) G OGr„(yl) if and only if the right side is for all x G X. D 

Proposition 4.2. Let 02„ be the orthogonal group o/(Z^",(5). 

(a) Let A be a field, a discrete valuation ring, or a quotient thereof. The action of 02n{A) 
on OGiniA) is transitive. 
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(b) Let k be a field. For eachm G {0, 1, . . . ,n}, the action of02n{k) on {("K, Z) G OGr„(A;)^ : 
dini(y r\ Z) = m] is transitive. 

Proof. 

(a) The hypothesis on A iniphes that every direct summand of A^" is free. Let Z G OGr„(A). 
Choose a basis Zi, . . . , Zn oi Z. Choose a basis yi, . . . ,yn for an A-niodule complement Y 
of Z in A^". Since ( , ) is nondegenerate, we can change the basis of Y to assume that 
{yi, Zj) = 6ij. Let y- := yi - Q{yi)zi - Y^jyt^Vh yj)zj. Then the A-hnear map sending the 
standard basis of A^" to zi, . . . , Zn, y'l, . . . ,yn is an element of 02n(^) sending W to Z. 

(b) Given [Y, Z) in the set, choose a basis Xi, . . . , Xm for YnZ, extend it to bases Xi, . . . , Xm, ^m+i? 
of Z and Xi, . . . , Xm, Vm+i, ■ ■ ■ , Un oi Y , and replace ym+i, • • • , 2/n by linear combinations 

so that {yi,Zj) = Sij for i,j G [m + 1,72]. Inductively choose Wi G k"^^ for i = 1,. . . ,m 
so that Wi is orthogonal to the Wj for j < i and to all the Xj, yj, Zj except {wi, Xi) = 1. 
Adjust each Wi by a multiple of Xi in order to assume in addition that Q{wi) = 0. 

Now, given another pair (Y',Z') in the set, the A-linear map sending the Wi,Xi,yi,Zi 
to their counterparts is an element of 02n{A) sending {Y, Z) to {Y', Z'). D 

Lemma 4.3. Let W G OGr„(Fp) be the mod p reduction of W . Let Y < W be an ¥p- 
subspace. Then the subgroup of 02n(Zp) preserving W and Y acts transitively on {X G 
OGr„(Fp) ■.XnW = Y}. 

Proof. For any X,X' in the set. Proposition |42jjb]) yields an element a G 02n{^p) sending 
{W,X) to (W,X'). It remains to lift a G Stabo2„(Fp)(W^) to an element a G Stabo2„(Zp)(W^), 
since such an a will preserve also Xr\W = X'r\W = Y. By Hensel's lemma, the lift 
exists if the group scheme stabilizer S < 02n of W is smooth over Z. In fact, if we define 
W := X Z" G OGr„(Z), then there is a short exact sequence of group schemes 

1^ B^ S ^ GLw -^ 1 

where B is the additive group scheme of alternating maps /3 : W — )■ W; namely, (5 & B maps 
to the unique s & S such that s{w') = w' + (3{w') for all w' G W, and S — ?• GL\y is defined 
by the action of S on W. Since B and GL^y are smooth, so is S. D 

4.3. Orthogonal Grassmannians. 

Proposition 4.4. For each n > 0, the functor OGr„ is represented by a smooth projective 
scheme of relative dimension n{n — l)/2 over Z, called an orthogonal Grassmannian. 

Proof. See |SGA 7n , XII, Proposition 2.8], where OGr„ is denoted Gen(X). The expression 
for the relative dimension arises in the proof there as the rank of /\ W. D 

If V^ ^ A^"- for some ring A, also write OGry for the A-scheme OGr„^^. 

Proposition 4.5. Fix n > 0. 

(a) The scheme OGr„ is a disjoint union of two isomorphic schemes OGrJ^™ and OGr° , 
distinguished by the property that for Z G OGr„,(A;) for a field k, 

Z G OGrr°(A;) ^^ dim(Z n Wk) is even. (7) 

(b) If k is a field, then OGr^™'^ and OGr° ^ are geometrically integral. 

(c) For any field k, two points Z, Z' G OGin{k) belong to the same component of OGr„ ^ if 
and only if dim(Z fl Z') = n (mod 2). 
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Proof. See the proof of |SGA Tn] XII, Proposition 2.8], which shows that there is a niorphism 
e: OGr„ -)■ Spec(Z x Z) with geometrically connected fibers. Define OGr°™'' and OGr°'^'^ 
as the preiniages of the components of Spec(Z x Z); they can be chosen so that ([7]) and 
(jcj) hold, by |SGA 7n] XII, Proposition 1.12]. Geometrically connected and smooth imply 



geometrically integral. D 

Remark 4.6. For n = 0, we may define OGr;,™' := OGro and OGr°'^<^ := 0. 

Corollary 4.7. If Zi, Z^, ^3 G OGr„(/c) for a field k, then 

dim(Zi n Z2) + dim(Z2 fl Z3) + dim(Z3 n Zi) = n (mod 2). 

Proof. By Proposition I4.5( lci). the parity of dim(Zi fl Z2) — n measures whether Zi and Z2 
belong to the same component. Summing three such integers gives the parity of the number 
of component switches in hopping from Zi to Z2 to Z3 and back to Zi; the latter number is 
even. D 

Lemma 4.8. Let q= ]f for a prime p and e > 1. Then 

n 

# OGr„(Z/gZ) = g"("-i)/2 JJ(1 + p^-"). 

Proof. The case e = 1 is |PR12t Proposition 2.6(b)]. The e = 1 case implies the general case 
since OGr„ is smooth of relative dimension n{n — l)/2. D 

4.4. Schubert subschemes. Suppose that < r < n. For a field k, let Sn,r{k) be the set of 
Z e OGrP^"*y(')(A;) such that dim{Z nWk) > r, or equivalently, the set oi Z e OGr„(A;) such 
that dim(ZnWfc) — r G 2Z>o. For an arbitrary ring R, let Sn,riR) be the set oi Z & OGr„(i?) 
such that Zk G Sn.r{k) for every field k that is a quotient of R. 

Proposition 4.9. For < r < n, the functor Sn,r is represented by a closed suhscheme of 
OGr„ of relative dimension n{n — l)/2 — r{r — l)/2 = {n — r){n + r — l)/2 over Z. 

Proof. There is a closed subscheme of Gr„ 2n whose /c-points parametrize n-dimensional sub- 
spaces Z with dim(Z fl W) > r. Its intersection with the closed subscheme OGr^'^"*-^''^-' is 
c 

To compute the relative dimension, we work over a field k, and consider the closed sub- 
scheme iS^j. C S„,,r X Gir^n parametrizing pairs {Z,X) such that X C ZnW. Given X C W, 
the quadratic form Q restricts to a hyperbolic quadratic form on X-^/X, and the Z's con- 
taining X are in bijection with the maximal isotropic subspaces of X-^/X, via Z 1— )■ Z/X. 
Thus the second projection 5^^ — ?■ Gr^.n has fibers isomorphic to OGr„_r, so 

dimiS^^ = dimGrr,n + dimOGr„_r = r{n — r) + {n — r){n — r — l)/2 = {n — r){n + r — l)/2. 

On the other hand, there is an open subscheme 5° ^ C Sn,r above which 5^ ^ — )■ Sn,r is 
an isomorphism, namely the subscheme parametrizing Z for which dim(Z fl W) equals r. If 
we view 5°^ as an open subscheme of 5^^, which maps to Grf,„, then its fiber above X is 
the open subscheme of OGrj(^±/j(^ consisting of subspaces Y not meeting W/X, and those 
subspaces are exactly the graphs of alternating maps from an [n — r)-dimensional space to 
its dual, so the fiber is A^""''^^""''^-'^''/^. It follows that 5°^ has the same dimension as S'^^.. 
Since Sn,r is sandwiched in between, it too has the same dimension. D 
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Call Sn,r a Schubert subscheme. It could also have been defined as the closure of the locally 
closed subscheme 5°^ C OGr„. 

5. Modeling Selmer groups using maximal isotropic submodules 

5.1. Properties of the short exact sequence. Let Z and W be maximal isotropic direct 
summands of V as in Section [T72l (For the time being, they do not need to be random; what 
we say here applies to any choice of Z and W.) From Z and W construct 

as in Section 11.21 

Proposition 5.1. The maximal divisible subgroup of S is R. 

Proof. Since the group R = {Z D W) ® ^ is divisible, it suffices to show that every infinitely 
divisible element a of S* is in R. Suppose that a G S* is infinitely divisible. For each m > 1, 
write a = p"^am for some am G S. By definition of S, we have am = {zm mod V) = 
{wm mod V) for some Zm & Z ® Qp and Wm E W ® Qp. Choose n such that a G p~"'V; then 
all the p"^Zm and p^Wm he in p~^V , which is compact, so there is an infinite subsequence 
of m such that the p^Zm converge and the p^Wm converge. The limits must be equal, since 
p^Zm — p^Wm £ p^V . The common limit in [Z fl W) ® Qp represents a. D 

Corollary 5.2. The group T is finite. 

Proof. The maximal divisible subgroup of a Zp-module with finitely generated Pontryagin 
dual is of finite index. D 

Corollary 5.3. The exact sequence O^R^S^T^O splits. 

Proof. This follows since R is divisible. D 

Proposition 5.4. If q is a power of p, then S[q] is isomorphic to the intersection Z/qZ fl 

W/qW %n V/qV. 



Proof. Intersecting 



^='^®fj^r«f 



with the g-torsion subgroup -V/V of V^ ® ^ yields 

The multiplication by q isomorphism -V/V — )■ V/qV sends this to ZjqZ fl W jqZ . D 

5.2. Model for the Cassels— Tate pairing. Here we define a natural nondegenerate al- 
ternating pairing on T . Extend Q to a quadratic form l^ ® Qp — !■ Qp and define ( , ) : {y ® 
Qp) -^{y ® Qp) -^ Qp by {x,y) := Q{x + y) - Q{x) - Q{y). Then ( , ) mod Zp identifies 
V ®Qp with its Pontryagin dual, and the subgroup 

Z^ := {v e V (g) Qp : {v, z) mod Zp = for all z ^ Z} 

equals Z®Qp\V. Similarly, W^ = W ®Qp\V. 
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Suppose that x,y eT. Lift x to x G (z ^ ^) n (w ® ^\ Choose z,^e Z ®Qp whose 
image in ^ (g) ^ equals x. Define w^, y, Zy, and Wy analogously. 

Proposition 5.5. The map 

X, y I— !■ Ql^^x — 'it'i;) mod Zp 
is well-defined, and it is a nondegenerate alternating bilinear pairing. 
Proof. First, 

z, - w, ekeT(v®Qp^V®^j= V. 

Since Z and W are isotropic, 

Q{z^ -Wy) = -{Zc,,Wy) = -{Zcc -Wcc,Wy), 

so changing Wy (by an element of W) changes Q{zx — Wy) by an element of (V, W) C Zp, 
so Q{zx — Wy) mod Zp is unchanged. Similarly, changing Zx (by an element of Z) does not 
change Q{zx — Wy) mod Zp. li x = y, then we may choose Wy = Wx, so Q(2a; — Wy) = 
Q{zx — Wx) G Q{V) C Zp, so Q{zx — Wy) mod Zp = 0. Thus we have an alternating bilinear 

pairing on (Z®^) fl (W^®^) and it remains to show that the kernel on either side is 
{Z n W) ® ^ so that it induces a nondegenerate alternating pairing on T. 
The following are equivalent for xG (Z®^) fl (W^®^)- 

• Q{zx - Wy) mod Zp = for all yE (z®^]r](W0^\ 

• {zx - Wx,Wy) G Zp, for all y e (z ® |^) n (w^ ® |^), 

• {zx - Wx, w) G Zp, for all w e {Z CS Qp + V) n {W ^ Qp + V) = Z^ n W^, 

• Zx-WxE {Z^ n W^)^ = Z + W, and 

• xe{znw)^^. D 



5.3. Predictions for rank. Corollary 12.21 defines a probability measure on OGr„(Zp). 

Proposition 5.6. Fix n. If Z is chosen randomly from OGr„(Zp), then the Zp-module 
Z nW is free of rank or 1, with probability 1/2 each. 

Proof. By Proposition 14. 9^ dimiS^,, < dimOGr„ for r > 2, so the probability that rk(Z fl 
ly) > 2 is by Proposition Ojb]). On the other hand, OGr^™" and OGr°'^'^ are isomorphic 
by Proposition I4.5([ai ). so the parity of rk(Z fl W) is equidistributed. D 

Conjecture 11.11 implies that the distribution of E{k) ® ^ matches that of {Z fl W) ® ^, 
or equivalently that the distribution of E{k) (g) Zp matches that of Z fl W. Thus it implies 
that 50% of elliptic curves over k have rank 0, and 50% have rank 1. 
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5.4. Random models and their compatibility. One can show that the locus of Z G 
OGr„(Zp) for which the sequence 0— j-i?— J-S*— J-T— J-Ois isomorphic to a given sequence is 
locally closed in the p-adic topology, and hence measurable. This would show that ^2n is well- 
defined. A similar argument using the probability measure on Sn,ri'^p) would show that 3^2n,r 
is well-defined. We find it more convenient, however, to prove these measurability claims 
and to prove that lim„_j.oo ^2n and lim^^oo ■^2n,r exist by relating them to the distributions 
^n,r- Recall that we already proved in Section [H^ that the S2/n,r exist and converge to a limit 
■2^ as n — )■ oo through integers with n — r E 2Z>o. 

Before giving the proof that the limit lim„_^oo ^2n,r ='■ '% exists and coincides with £^ 
(Theorem ll.6l!f b|). let us explain the idea. There is a simple relationship between alternating 
matrices A and maximal isotropic direct summands Z: namely, if we view A as a linear map 
W — )■ W^, then Z := graph(y4) G W (B W'^ is maximal isotropic. But not every maximal 
isotropic direct summand Z <W ® W^ comes from an A. Over a field, the Z's that arise 
are those that intersect W'^ trivially; at the other extreme is W^ itself; a general Z is a 
hybrid of these two extremes: namely, they arise by writing W = Wi © W2, forming the 
corresponding decomposition W'^ = W^ © W2 , and taking Z := W^ © graph(74) for some 
alternating A: W2 — j- W2 ■ We need to work over Zp instead of a field, but we can still 
represent a general Z in terms of a decomposition as above (note, however, that the Z's that 
arise directly from an A on the whole of W are those for which the mod p reductions of Z and 
W'^ intersect trivially). Moreover, we will show that the uniform distribution of Z G Sn,r 
can be obtained by choosing the decompositions of W and W'^ at random (with respect to a 
suitable measure) and then choosing A : W2 — )■ W2 at random from those alternating maps 
whose kernel has rank r. The distribution ^2n,r is defined in terms of the group T arising 
from Z. It turns out that T ^ (coker yl)tors; and one shows that with high probability as 
n — )■ 00, the size of A is large, so the distribution of (coker A)tors is well approximated by 



Proof of Theorem I j.6lf bl). We use the notation V := V/pV. Fix a maximal isotropic Fp- 
subspace A < V^ with respect to the Fp- valued quadratic form {Q mod p) such that AClW = 
in V. Define a distribution ^ on submodules Z < V as follows: 



1. Choose a maximal isotropic direct summand W^ < V at random conditioned on VV^ = A. 
(Then ( , )|vfxVFT is nondegenerate mod p, so it identifies W^ with the Zp-dual of W, so 
the name W"^ makes sense. Also, V = W (B W^.) 

2. Choose m G {0, 1, . . . , n — r} at random so that its distribution matches the distribution 
of dim(2^ n A) for Z chosen from Sn^rC^p)- The scheme Sn,r is contained in OGi^^"^^^^^^' , 
so dim(^ n W) = r (mod 2). Corollary 14.71 applied to [Z, W, A) implies that m + r = n 
(mod 2). 

3. Choose a random Zp-module decomposition of W as Wi © W2 such that rk Wi = m. Let 
W^ = Wi © W2 be the induced decomposition of W'^; i.e., W2 is the annihilator of Wi 
with respect to ( , )\wxWT, and W^ is the annihilator of W2- (Then W^ is isomorphic 
to the Zp-dual of Wiioii = l,2.) 

4. Choose an alternating Zp-linear map A: W2 — > W2 at random from maps whose kernel 
has rank r (since rkl^2 = n — m = r (mod 2), the set of such A is nonempty). Let 
graph(74) < PF2 x W2 be its graph. Let Z = W^ © graph(yl). 
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Since A is alternating, the direct summand graph(A) of V is isotropic. Since Wi < W"^, the 
direct summand Wi is isotropic. Under ( , )\wxW'^j the direct summand Wf annihilates 
W2 (since both are contained in W'^) and W2 (by definition). The previous three sentences 
show that Z is an isotropic direct summand. Its rank is rk Wi + rk W2 = rk Wi + rk W2 = n, 
so Z is a maximal isotropic direct summand. 
Reducing modulo p yields 



Vrf ©graph(A), 



so in V we have 



which is of Fp-dimension m. 



znA = znwT = wl 



T 



Claim: ^ coincides with the uniform distribution on Sn,r- Both distributions assign the 
uniform measure to the set of maximal isotropic direct summands Z with dim(Z fl W) = r 
having a fixed mod p reduction Z, so it suffices to show that the distributions of Z match. 
For each m, both distributions for Z are uniform over all maximal isotropic subspaces of V 
for which dim(Z fl W) > r and dim(Z fl A) = m, so it suffices to prove that the distribution 
of the integer dim(Z fl A) is the same for both distributions. The latter holds by the choice 
of m. This proves the claim. 

For Z sampled from ^, the definition of Z yields 

(z.|)n(,..|)..ap.(.«|)n(,..|)...(.«|), 

whose Pontryagin dual is coker A. The quotient T of the left side by its maximal divis- 
ible subgroup {Z n W) ® ^ is dual to the finite group (coker A) tors, hence isomorphic to 
(coker A)tors- Thus the distribution 3^2n,r of T is a weighted average over m of the distribution 
^n-m,u of (coker ^)tors for A G An-m,u'i this proves in particular that ^2n.r is well-defined. 

We next show that as n — )■ 00, the probability that m is small, say less than n/2, tends to 
1. In fact, we show that this holds even after conditioning on the intersection Z fl W] i.e., 
we will prove that 

inf Prob [m < n/2\^ r\W = Y) ^ I 



Y 



as n -> 00, where Y ranges over the possibilities for Z fl W. Fix Y . Let y := dimy. Since 
m + y < dim Z = n, the probability is 1 if y > n/2, so assume that y < n/2. The subgroup 
of C)2n(^p) preserving W and Y acts transitively on the maximal isotropic subspaces Z 
of Fp"^ satisfying Z (1 W = Y, hj Lemma 14.31 so the distribution of Z is uniform among 



p 

such subspaces. Thus Z/Y is a uniformly random maximal isotropic subspace of Y-'-/Y 

intersecting W/Y trivially. In Y-'-/Y, the image of AnY-^ is a maximal isotropic complement 
C of W/Y, so Z/Y is the graph of a uniformly random alternating map B: C -^ W/Y (see 
Lemma [4.1l!r5|) ). Then m = dimker B. By Lemma [3. 7^ m < {n — y)/2 with high probability, 
so m < n/2 with high probability. 

So the size n — moi the matrix A is large with high probability, and we have already seen 
that n — m = r (mod 2). Thus the weighted average converges as n — )■ cxo to ^. In other 
words, ^ exists and coincides with J^r- D 

Proposition 5.7. The distribution ^ = lim„_j,oo •^2n exists. 
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Proof. Define a new distribution ^2n o^ short exact sequences as follows. Choose r G {0, 1} 
uniformly at random, and let R = (Qp/Zp)''. Choose T with respect to the distribution 
^2n,r- Form the exact sequence 

— > R — > R®T — >T -^0. 

By Proposition 15.61 and Corollary 15. 3[ the distribution ^2n coincides with ^2n', in particular, 
it is well-defined. 

For each r, the distribution ^2n,r tends to a limit as n — )> oo, so the same is true of 

5.5. Predictions for Selpe. 

Lemma 5.8. Fix a global field k. Asymptotically 100% of elliptic curves over k satisfy 

EikUrs = 0. 

Proof. For each global field k and prime p, the theory of modular curves and Igusa curves 
shows that the generic elliptic curve (over A;(ai, 02, 03, 04, ag)) has no nonzero rational p- 
torsion point. By the Hilbert irreducibility theorem, the same holds for asymptotically 
100% of elliptic curves over k. The size of the torsion subgroup is bounded by a constant 
depending only on k |Lev68[lMaz77[[KM95[IMer96) . so we need consider only finitely many 
p. Thus 100% of E e (? satisfy E{k)tors = 0. D 

Remark 5.9. One could also prove Lemma [5.81 without using |Mer96j : the torsion subgroup 
can also be controlled by using reduction modulo primes. 

Proposition 5.10. Suppose that E is an elliptic curve over a global field k with E{k)tors = 0. 
Let m and n be positive integers such that char k\m.,n and m\n. Then 

(a) The inclusion E[m] — )■ E[n] induces an isomorphism }l^{k,E[m]) — )■ H"'^(A;, £'[r7,])[m]. 

(b) This isomorphism identifies Selm-E with {^e\nE)[rn\. 

(c) If p is a prime number and e G Z>o, then Selpe E ^ (Selpoo E)[p'^]. 

Proof. 

(a) Taking cohomology of —)■ E[m\ -^ E[n] — > E[n/m] — )■ yields a homomorphism a 
fitting into the exact sequence 

O^Ii\k,E[m]) -^}i\k,E[n\) ^R\k,E[n/m]). 

Replacing m by n/m shows that E[n/m] M- E[n\ induces an injection H^(/c, E[n/m\) ^■ 
H^(/c, -E'[?T.]). The composition E[n] ^ E[n/m] M- E[n] induces a composition H^(/c, E[n\) A 
H^(/c, E[n/m\) M- H"'^(A;, E[n\) that equals multiplication by ?Ti, so H"'^(A;, £'[?Ti]) ~ ker a ~ 
Yi\k,E[n])[m]. 

(b) An element of Y{^{k^E\m]) lies in the subgroup Selm-E if and only if its image in 
H^(/c,£'[n]) lies in SeU-E, since the condition for either is that it map to in H^(/c^,£') 
for every v. 

(c) Apply (jb]) to p^\p^ and take the direct limit as n — > 00. D 

Let q = p'^ for some prime p and e > 0. Because of Propositions 15.41 and I5.l0r ic]). Conjec- 
ture 11.11 implies that the distribution of Selg E is the limit as n — >■ 00 of the distribution of 
ZnW ioT random Z,W & OGr„(Z/gZ). Taking q = p, we recover |PR12| Conjecture 1.1(a)]. 
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Theorem 5.11. Fix m e Z>o. If Z,W G OGr„(Z/gZ) are chosen at random, then the 
expected number of injective homomorphisms (Z/gZ)™" -^ Z D W tends to g™('"+i)/2 ag 
n ^ CO. 

Proof. For each n, we may fix W. The desired number is the number of injective homomor- 
phisms h: (Z/gZ)"* — )■ W times the probabihty that a random Z G OGr„(Z/gZ) contains 
im(/i). The number of /I's is (#W^)™'niio (-'- ~ Q'*"")- The Z's containing im(/i) corre- 
spond to the maximal isotropic direct summands of im(/i)-'-/im(/i), a hyperbohc quadratic 
Z/gZ- module of rank 2n — 2m, so their number is ^ OGr„_m(Z/gZ). Using Lemma [4. 8^ we 
compute 

(#iy)- nV - P-) *?^rif/f:^ = r^"""-''^' n (1 - p-) n ( 



^^ #OGr„(Z/gZ) ^^^ 



P 



which tends to g™-(''"+i)/2 as n — )■ oo. D 

Combining Conjecture II. H and Theorem 15.111 yields the prediction that the expected num- 
ber of injective homomorphisms (Z/gZ)*" — )■ Selg-E as E varies over S" is g™('"+i)/2 

Remark 5.12. Suppose that g is a prime p. By |PR12t Proposition 2.22(a)], the m^^ moment 
of j^{ZnW) equals 111^1 (P* + -'-)• Theorem 15 . 1 1 1 lets us compute this moment in another way, 
as the expected number of homomorphisms (Z/pZ)™ — > G, injective or not, by summing 
over the possibilities for the kernel. 

One could also compute the moments for non-prime g, but the answers appear to be 
complicated. See |DJ13a| for an analogous calculation of the conjectural moments of 7^III[p^]. 

Remark 5.13. For g = 2 and m = 1, the result of Theorem 15.111 can be related to the 
Tamagawa number r(PGL2) = 2. (See |BS10] and |Pool2] .) Is there a Tamagawa number 



explanation for all g and m7 

5.6. Considering all p-primary parts at once. Let SelE := lim Sel„ E' be the direct 
limit over all n G Z>o, ordered by divisibility, so Sel-E ^ ^ Selpca E. It fits in an exact 



sequence 



— y E{k) ®^ — ^Sel^ — ^m — ^0 

ILi 



of discrete Z-modules (i.e., torsion abelian groups). The p-primary parts of this sequence 
should not be completely independent, because if LQ is finite, then the Zp-corank of the 
p-primary part Selpoo E of Sel E is independent of p. 

Therefore we condition on the rank r, in which case we need only focus on the model for LQ. 
Here is our model: independently for each prime p, choose a finite symplectic abelian p-group 
Tp with respect to ,%. (or equivalently ^, by Theorem II. 6lf bl)). and define T := ®pTp. 

Theorem 5.14. Ifr>l, then the group T above is finite with probability 1, and has the 
distribution of |Del01[ Heuristic Assumption], with the correction that r/2 is replaced by r. 

Proof. By Theorem 13. Ill for G = 0, 



Prob(Tp ^ 0) = 1 - n (^ ~ ^^~^') = '^^P' 



l-2r\ 



i=r+l 
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If r > 1, then X]pProb(Tp 7^ 0) converges, so the Borel-CanteUi lemma iniphes that Tp = 
for all but finitely p with probability 1, so T is finite with probability 1. The probability 
that T is isomorphic to a given symplectic abelian group G is the (convergent) product over 
p of the probability that Tp ^ G'[p°°]. Since the formula in [DelOU Heuristic Assumption] is 
multiplicative on p-primary parts, the result follows. D 

For the rest of this section, assume that r = 0. Then Ylp^^'^^i'^p ¥" 0) diverges, and the 
probability that T is isomorphic to any particular finite abelian group is 0, so we do not 
obtain a discrete probability distribution on finite abelian groups. This situation is similar 
to that for class groups of imaginary quadratic fields: the density of such fields having a 
specified class group is 0. 

Following |Del01) . however, we can measure the probability of certain infinite sets of iso- 
morphism classes of symplectic abelian groups, or more generally, compute the average of 
certain functions / defined on such isomorphism classes. Let f^o,<x be the set oi E & S'q of 
height less than X. Let Y2#G<n have the same meaning as at the end of Section 13.81 For 
k = Q, Delaunay [DelOlt Heuristic Assumption], inspired by the Cohen-Lenstra heuristics 
for class groups of imaginary quadratic fields |CL84) . proposed the heuristic 

hm ^^ = hm ^ . (8) 

Some hypotheses on / are necessary since one can construct wildly oscillating functions 
/ for which even the "easy" limit on the right side of ([8]) fails to exist. Fix a set of primes 
P such that Xlpepl/P < ^^- Given G, write G = Hq x H'q where i^Hc is divisible only 
by primes in P, and j^Hq is divisible only by primes not in P. We use Yljj (resp. '^j^,) to 
denote a sum restricted to symplectic abelian groups of order divisible only by primes in P 
(resp., not in P), and we may restrict the sum further by limiting the size of H or H'. Then 
^ gpProb(Tp 7^ 0) < XlneP^(Vp) < °*^! ^'^ ^^e Borel-CanteUi lemma implies that the 
random group ^.p^pTp is given by a discrete probability distribution on the set of (finite) 
symplectic abelian groups H of order divisible only by primes in P; in fact. Theorem 13.91 

implies that Prob (©pgp^p ^ // j = CpWh, where cp is a normalizing constant defined as 

the convergent product YipeP YYHii^ — p^~^*); in particular, J2h '^h < 00. By an L^ function 
on the set of such H, we mean a real-valued function / such that Y2h \fi'^)\'^H < 00; in 
particular, bounded functions are L^. Given such an L^ function /, we define 

and extend / to all symplectic abelian groups G by defining f{G) := /{Hg)- 

In contrast with Delaunay's heuristic ([8]), our heuristic predicts that the left hand side 
of dH]) should equal J f. We now prove that Delaunay's prediction agrees with ours. 

Theorem 5.15. Let P be a set of primes such that Xlnep Vp < ^^- -^^^ / ^^ '^'^ -^^ function 
on the set of (isomorphism classes of) symplectic abelian groups H of order divisible only by 
primes in P. Extend f to all symplectic abelian groups G by defining f{G) := f{HG)- Then 

hm%Si^<^^=//. (9) 
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Proof of Theorem \5.15[ We may add a constant to / in order to assume that J / = 0; in 
other words, "^jj f{H)wH = 0. For any M G M, define Sm '■= YliitH<M fi.H)wH', thus the 
Sm are bounded and Wthm^oo Sm = 0. Suppose that e > is given; fix m such that M > m 
imphes \Sm\ < e. Then 



#G<n 



Yl Yl f{H)wHWH^ 

#H'<n #H<^ 

— Z^ ^^' I Sn/#H' I 
#H'<n 

#H'<n/m #H'e[n/m,n] 

< j - log 77, J e + 0(log?Ti) (by Corollary 13. ISp 



we write each G sls H x H') 



and 



y Wq > — log n (by Corollary I3.15P . 



#G<n. 

Thus the lim sup of the absolute value of the ratio in (Q is bounded by e. This holds for 
every e, so the limit is 0, matching j f. D 

6. Arithmetic justification 

In this section, we prove results on the arithmetic of elliptic curves that partially explain 
why Selpe E should behave like an intersection of maximal isotropic direct summands. 

6.1. Shafarevich— Tate groups of finite group schemes. For any G^-module or finite 
/c-group scheme M, define 

m\k, M) := ker j R\k, M) ^ Y[ R^K, M) 

(If M is not etale, then the cohomology should be interpreted as fppf cohomology.) 

Proposition 6.1. Let E he an elliptic curve over a global field k. Let e G Z>o. If char k ^ 
p, suppose that the image G of Gk ^ Ant E[p'^] ^ GL2(Z/p'^Z) contains SL2(Z/p^Z). // 
char k = p, suppose that the image G ofGk -> Aut E[p'^]{k^°^) is cyclic. Then UI^{k, Elp*^]) = 
0. 

Remark 6.2. For each k, the hypothesis of Proposition 16.11 holds for 100% of elliptic curves 
over k, as we now explain. If char k y^ p, then the result follows from the Hilbert irreducibility 
theorem. If char k = p and either p > 2 or e < 2, then £'[p^] {k^'^^) is cyclic of order j?-^ for some 
/ < e, and its automorphism group is (Z/p-^Z) ^ , which is cyclic; thus the hypothesis holds for 
all elliptic curves over k. Finally, if char k = 2, then an explicit calculation with Weierstrass 
equations shows that E[2]{k'"'P) = for 100% of E, and in that case, E[2%k'"'P) = follows. 
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Before proving Proposition 16. ![ we introduce some more definitions and prove a few basic 
facts. For any finite group G and G-module M, define 

nly,{G, M) := pl ker (H^(G, M) -^ E\H, M)) , 

cyclic H <G 

which, hke H^(G,M), is contravariant in G and covariant in M. For any Galois extension 
L/k and Gal(L//i;)-module M, define 

m\L/k,M) :=ker j H^(Gal(L/A;), M) ^ JJ H^(Gal(L^/A;„), M) 

where Gal{Lw/ky) is a decomposition group associated to a chosen place w oi L above v; 
since the conjugation action Gal(L/A;) on itself induces the identity on H^(Gal(L//c), M), it 
does not matter which w is chosen, and we could alternatively take the kernel of the map to 
the product over all w instead of using only one above each v. 

Lemma 6.3 (cf. |BPS12| Proposition 8.3]). 

(a) // a finite group G acts trivially on an abelian group M , then H^ (G, M) = 0. 

(b) // L/k is a finite Galois extension with Galois group G, and M is a G-module, then 
m\L/k,M)(Z^l^^{G,M). 

(c) // L/k is a Galois extension with Galois group G, and G acts trivially on an abelian 
group M, then m.^{L/k,M) = 0. 

(d) If L/k is a finite Galois extension, and M is a Gal{L/ k) -module, and L' /k is a larger Ga- 
lois extension (so Gal(L'/L) acts trivially on M), then inflation induces an isomorphism 
mi(L/fc,M) ^ m.^{L'/k,M). 

(e) If L'/k is a Galois extension, and M is a finite GaA{L' /k) -module, and G is the image 
of GaX{L' /k) -^ AutM, then in.^{L' /k,M) is isomorphic to a subgroup of Y[\y^{G , M) . 

Proof. 

(a) A homomorphism G ^ M that restricts to on each cyclic subgroup of G is 0. 

(b) By the Chebotarev density theorem, each cyclic subgroup of G arises as a decomposition 
subgroup. 

(c) If L/k is finite, this follows from ^ and (jb]). The general case follows by taking a direct 
limit. 

(d) From the inflation-restriction sequence 

-^ Y[\Ga\{L/k),M) -^ Y[\Ga\{L' / k) , M) -^ Yi\Ga\{L' / L) , M) 
mapping to its local analogues, we obtain an exact sequence 

-^ m^{L/k,M) -^ m^{L'/k,M) -^ UI\L'/L,M). 

The last term is by (jcj). 

(e) The quotient G of GaA{L' /k) is Gal{L/k) for a finite Galois extension L/k. Apply ([d]) 
and then (jb]). D 

Proof of Proposition ^. 1\ for char k ^ p. The case e = 1 is |PR12t Proposition 3.3(e)], so 
assume e > 2. Let Se := SL2(Z/p^Z). Let M := E[p^] ~ {Z/p^Zf. By Lemma EI3l|ej) , 
Ill^(k,M) is isomorphic to a subgroup of HJ (G, M). The invariant subgroup M^" is 0, 
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so the inflation-restriction sequence for Se < G shows that HJ (G, M) — )■ HJ (5*6, M) is 
injective. It remains to show that H^ (5'e,M) = 0. 

The inflation-restriction sequence associated to the central subgroup {±1} < S^ is 

-^ E\SJ{±1},M[2]) ^ E\S,,M) -^ Hl({±l},M)^^ (10) 

If p is odd, M[2] = and }1\{±1},M) = (killed by both 2 and p), so B.\Se, M) = 0. 

So assume that p = 2. Then H ({±1}, M) ~ (Z/2Z)^, on which Se acts through 5*1 in the 
standard way, so H^({±1}, M)'^'= = 0, so the map inf in (fTOj) is an isomorphism. The map 
inf factors as 

}i\SJ{±l},M[2]) ^E\S,,M[2]) ^E\S,,M), 

so the second map is surjective. It is also injective, since H°(S'e, 2M) = 0. Thus H^(S'e, M[2]) ~ 

Deflne a flltration {1} < Fg-i < ■ ■ ■ < r2 < Fi < Sg by Tm '■= ker(S'e -^ Sm)- We prove 
by induction on e that the inclusion r^[ri, Fi] < F2 is an equality. We check the cases e = 2 
and e = 3 by hand. For e > 4, every element of Fe_i is represented by 1 + 2'^^'^ A for some 
trace-0 integer matrix A, and is the square of 1 + 2'^~'^A G Fe_2 < Fi; now apply the inductive 
hypothesis to S^^i = S'e/Fe_i. 

The previous paragraph shows that F2 is contained in the kernel of every homomorphism 
Fi -^ Z/2Z. Thus the restriction map H^(Fi,M[2]) -^ H^(F2,M[2]) is (the actions are 
trivial). Consider the maps a and /3 in the inflation-restriction sequence 

^ B\S2,M[2]) ^ E\Se,M[2]) A H1(F2,M[2]). 

Since /3 factors through the previous restriction map, /3 = 0, and a is an isomorphism. Let 
Ue < •S'e be the subgroup of unipotent upper triangular matrices. The horizontal maps in 
the bottom row of the commutative diagram 

R\S2, M[2]) -^ Ii\S,, M[2]) ^^ Hi(5e, M) 



R\U2, M[2])c^^ E\Ue, M[2]) R\Ue, M) 

are injective (for the second map, observe that M^'= — )■ (2M)'^'= is surjective). Direct calcu- 
lation shows that the left vertical map is injective too (in fact, it is an isomorphism between 
groups of order 2). So the right vertical map is injective. In particular, HJ (S'e, M) = 0. D 

The following two lemmas will be used in the proof of the char k = p case of Proposition 16. II 

Lemma 6.4. Let k be a field of characteristic p. Let E be an elliptic curve over k. 

(a) If E is ordinary, then for any e G Z>o there is an exact sequence 

O^M"" ^ E[p^] ^ M ^ (11) 

involving a finite etale group scheme M of order p^ and its Cartier dual M^. 

(b) If E is supersingular, then E[p^] is an iterated extension of copies of Up. 

Proof. Let F : E ^ E' he the p*^-Frobenius morphism, and let V : E' ^ E he its dual. Then 
F is surjective and VF = p'^, so there is an exact sequence 

^ ker F ^ E[p^] ^ ker 1^ ^ 0. 
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Moreover, kerF is the Cartier dual of kerl^, by |Mum70( III. 15, Theorem 1] (the proof there 
works over any field). 

(a) If E is ordinary, then ker l^ is a finite etale group scheme of order deg V = ]f . 

(b) Suppose that E is super singular. The group scheme E\jf\ is an iterated extension of 
copies of E\p\^ so we may reduce to the case e = 1. If e = 1, then kerF and kerl^ are 
isomorphic to a^: over an algebraically closed field, this is well known |Oor66t II. 15. 5], 
and it follows over any field of characteristic p since the twists of a^ are classified by 
H^(A;,Autap) =H^(fc,G^) = 0. D 

Lemma 6.5. Let k he a global field of characteristic p. Let M be a finite commutative 
group scheme over k that is an iterated extension of copies of fip and a^. If v & Q, then 
H^(fc,M) -)■ H^(A;^,M) is injective. In particular, III^(/c,M) = 0. 



xp 



-)■ 



Proof When M = /Xp, Hilbert's theorem 90 implies that B.^{k, M) -)> H^(fc„, M) is k^'/k 

k^ /k^P. Similarly, when M = ap, it is the homomorphism of additive groups k/k^ — )■ k^/kl,. 

Both homomorphisms are injective, by |PV10t Lemma 3.1]. 

If — )■ M' — )■ M — )■ M" — )■ is an extension of group schemes as in the statement, and the 
result holds for M' and M", then it holds for M too (this uses injectivity of H^(A;t,, M') — )■ 
}^{k^^ M), which follows since H°(/c^, M") = 0). So the general case follows by induction on 
#M. D 

Proof of Proposition 16. Jl for char k = p. 

Case 1: E is super singular. Combine Lemmas I6.4I!| E|) and 16.51 

Case 2: E is ordinary. Let M be as in Lemma [6.4([ai ). Let A^ = E[p^]{kf^^) ., which injects 
into M(/c*^*^P) under the map induced by (fTTj) . Let L be the splitting field of M. Thus L 
is a Galois extension of k and the image of Gal(L/A;) — )■ Aut A^ is G. We now break into 
subcases. 

Case 2a: L = k. Then (fTTj) has the form 

0^ fipe ^ E[p^] -^ Z//Z -^ 0. 

By Lemma [6.3( [ci). III^(A;, Z/p'^Z) = 0, so any C, € UI^{k,E[p'^]) must come from an element 
r] G H^(/c,/ipe). Pick any v E Vl. The middle vertical map in the commutative diagram 

Z/p^Z ^ }i\k, fipe) ^ R\k, Eip"]) 

W 

Z/p-Z ii\k,,fipe) R'ik,, E[p^]) 



is injective by Lemma 16.51 and a diagram chase shows that r] comes from an element of 
Z/p^Z. Thus ^ = 0. 

Case 2b: L is general. By definition of L, we have E[p'^]{L) = N. For any place w of L, 
every element of L^ that is algebraic over L is actually separable over L |PV10t Lemma 3.1], 
so E[p%L^) = N too. By Case 2a, m^{L,E[p^]) = 0. Because of the (fppf) inflation- 
restriction sequence 

^ R\Gal{L/k), N) -^ E\k, F[/]) -^ R\L, E[p']), 
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which maps to its analogue for each extension Lw/k^ of local fields, we have III^(/c, -E'[p^]) — 
III^(Gal(L//i;), iV). By Lemma [6.3( 16]). the latter is isomorphic to a subgroup of H^ (G, A^), 
which is trivial since G is cyclic by assumption. D 

Remark 6.6. In Proposition 16. ![ when p = 2 and e = 3, the hypothesis that the image of 
Gk — )■ AvX E[p'^]{k^^'^) is cyclic can fail. The last line of the proof above cannot be imme- 
diately extended to the case in which the image is non-cyclic, because one can check that 
H^ ((Z/8Z)^,Z/8Z) 7^ for the standard nontrivial action. The conclusion of Proposi- 
tion |6lT] might still hold, however. 

6.2. Intersection of maximal isotropic subgroups. For nonarchimedean w, let O^ be 
the valuation ring in k^. Let A = 1 I (A;^,, (9„) be the adele ring of k. Suppose that 

E, k, and p'^ satisfy the hypothesis of Proposition 16. ![ so that UI^{k,E\p'^]) = 0. Then 
|PR12| Theorem 4.14] applied with X: A ^ A being [p'']: E ^ E shows that Se\pe E is 
isomorphic to the intersection of two maximal isotropic subgroups of 

Ii\A, E[p^]) := n'(H^(^.,^[/]),H^(a,i?[p1)) ^ n' fH^(^-^[P'])'^7r 

namely the images of E{A)/p^E{A) = Yl^E{ky)/p^E{k^) and H^(fc,E[p^]). 

6.3. Direct summands. It is natural to ask whether these images are direct summands, 
given that we modeled Selpe E by an intersection of direct summands. Corollary 16.81 below 
shows that at least the first of these images is a direct summand. 

Proposition 6.7. Let E be an abelian variety over an arbitrary field k. Let n G Z>o. 

Then the image of the coboundary map E{k)/nE{k) — > H {k^E[n\) is a direct summand of 
R\k,E[n]). 

Proof. (We thank Bart de Smit and Christopher Skinner for ideas used in this proof.) For 
each m\n, the commutative diagram 

R\k, E[m]) — - }i\k, E)[m] 



R\k,E[n])^^R\k,E)[n] 

shows that any order m element of 'R^{k, E)[n\ lifts to an order m element of 'R^{k, E[n]) 
under the surjection a in the diagram. Any Z/nZ-module is a direct sum of cyclic groups 
|Prii23| §17], |Bae35| pp. 274-275]; applying this to ii^(k, E)[n] and using the previous 
sentence shows that a is split. Finally, ker(a) = ira{6). D 

Corollary 6.8. Let E be an abelian variety over a global field k. Let n G Z>o. Then the 
image of E{A)/nE{A) — ?■ H^(A,£'[n]) is a direct summand of }i^ {A, E[n]) . 

Proof. Proposition 16.71 yields a complement C„ of E(ky)/nE(ky) in }i^(ky, E[n]). Then 
®v€n C^' is a complement of E{A)/nE{A) in H^(A, E[n]). D 

Question 6.9. Is the image of H^(/c,£'[n]) — )■ II^(A,£'[n]) a direct summand? 
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Lemma 6.10. If chai k \ n and the action of Gk on E[n\ is trivial, then the answer to 
Question \6.9\ is yes. 

Proof. We have E[n] c:^ finX fJ'n, so we must show that the image of k^ /k^"^ -4 A^/A^" is a 
direct summand. By Lemma fG-lll below. it is enough to show that k^ /k^"^ — )■ A^/A^"^ is in- 
jective for each m\n. This "local-global principle for m^^ powers" is a well known consequence 
of the Chebotarev density theorem. D 

Lemma 6.11. Let n G Z>o. Let 6 : A ^ B be a homomorphism of Tj / riL-modules such that 
the induced morphism A/mA -^ B/mB is injective for every m\n. Then 6{A) is a direct 
summand of B. 

Proof. (We thank Bart de Smit for this proof.) Taking m = n shows that 5 is injective, so 
it fits into a short exact sequence 

of Z/nZ-modules. Write C as a direct sum of cyclic groups Cj. For each m, the hypothesis 
together with the snake lemma shows that B[m\ — )■ C[rn\ is surjective. Thus we can construct 
a splitting of the surjection i? — t- C, by lifting a generator of each Ci to an element of B of 
the same order. D 

6.4. Preeness of the ambient group. On the arithmetic side, the Z/p^Z-module H^(A, -Efp*^]) 
carrying a quadratic form is not always free. But we have modeled it by the free module 
(Z/p'^Z)2" with (Q modp^). 

Question 6.12. Can we develop a more sophisticated model in which we start with a 
compatible system consisting of a quadratic form on a non-free Z/p^Z-module for each e? 
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